Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
File: TuFxPha0_Y8zAYh95qERmARJsp4.mft (raw, json)
Hash identifier: +SW8BUOlF7iSM+k+cu9b3HKrYgJTnD1/fmiVEKl6jFE=
Subject key identifier: DE:73:AA:E8:A6:10:32:8E:6B:5D:97:8C:70:6F:8F:BE:19:04:24:ED
Authority key identifier: 4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
Certificate issuer: /CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Certificate serial: 019749D5F21DAD1D2F4AAED2EAB67B514F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 10:00:47 +0000
Manifest this update: Sat 07 Jun 2025 10:00:47 +0000
Manifest next update: Sun 08 Jun 2025 10:00:47 +0000
Files and hashes: 1: IJqJkkG32juZ9JC_-n807ugagLE.roa (hash: a5ckR7gAH5+zi6QRTimZRXE/Wgs09xk/gP8A83O6nQM=)
2: TuFxPha0_Y8zAYh95qERmARJsp4.crl (hash: JHV9imzMLvXx1attqSxjJ99k6gS26D1UrXhg/QB9Hhc=)
3: yXKulFLipTbjSUmowLRqtzSALEA.roa (hash: LNf43mdJtw9mAKFqBqZr/MgvJNf0ToK4qGWZ05MJPz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:f2:1d:ad:1d:2f:4a:ae:d2:ea:b6:7b:51:4f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Validity
Not Before: Jun 7 10:00:47 2025 GMT
Not After : Jun 8 10:00:47 2025 GMT
Subject: CN=de73aae8a610328e6b5d978c706f8fbe190424ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b1:a9:dd:14:a0:9e:51:ab:0b:4d:d0:0c:c3:
5a:49:55:54:de:b0:f6:5d:1c:a7:78:3e:d7:69:3d:
54:44:0b:0e:22:6b:6e:f9:e0:60:ca:2e:03:fe:eb:
06:23:44:8d:44:4e:72:52:da:8e:0d:07:37:4a:32:
56:b3:9e:7c:73:09:68:f5:eb:89:89:4d:c9:49:f0:
11:a4:ec:c2:87:03:5e:f3:e4:35:7e:4d:62:d7:af:
db:b8:c5:54:ff:70:f5:20:c8:e7:d8:b5:fe:73:94:
7c:36:df:ca:48:02:03:5b:65:5b:b2:15:3f:ac:e4:
4c:85:41:29:7d:65:8c:69:6c:0a:ee:74:a5:a3:d9:
2f:da:03:76:a9:55:cb:8a:12:41:df:d0:09:07:e3:
f4:d2:45:db:1e:c4:71:ff:aa:8d:26:de:6b:2d:46:
76:d0:88:a0:a5:5b:6e:59:64:e1:de:86:c6:a5:28:
e1:ef:23:a2:30:e9:c7:7c:1d:16:9c:21:ab:6c:62:
c9:bc:72:3a:12:95:ea:07:f0:75:64:0c:cf:24:d1:
0c:31:bc:dd:fc:4e:de:83:07:08:0b:01:91:a7:aa:
1f:aa:04:9b:3e:66:70:3b:9d:2b:08:37:ad:b8:6a:
1b:43:6e:44:bf:c2:08:d3:67:55:04:1f:b4:f1:ed:
c5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:73:AA:E8:A6:10:32:8E:6B:5D:97:8C:70:6F:8F:BE:19:04:24:ED
X509v3 Authority Key Identifier:
keyid:4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:98:19:ad:11:29:63:34:c2:d4:04:44:ce:35:5e:c5:c3:f0:
c4:02:92:1b:ac:d5:20:c1:be:65:b2:d0:a8:2c:93:0a:bc:5d:
5d:d8:2a:77:ca:b9:60:29:03:86:c3:2f:70:05:1c:1c:e4:50:
33:c5:b0:9f:d1:93:c8:44:03:e1:ea:74:c7:97:73:25:11:93:
0d:58:c4:4d:1b:a5:8b:b7:c4:ca:f5:2d:6a:52:4e:e7:2b:bf:
93:b4:02:85:c5:70:71:d0:cd:b2:dd:e3:fa:86:8e:70:6b:9b:
0f:6f:2f:17:37:e4:c9:81:5c:ff:c5:66:98:0a:a4:42:bd:75:
6d:8d:bc:aa:34:33:33:85:02:ff:c3:10:31:30:01:f5:6b:ae:
fd:a1:6e:69:05:3a:7b:f7:c8:ca:23:1f:26:8e:2f:da:27:ca:
b3:41:0a:c5:b9:27:c6:f8:1b:85:45:7b:a6:07:60:4c:e7:c9:
90:59:8d:4b:0f:92:9f:a3:f6:23:1f:0b:a6:04:7d:94:8e:3c:
fb:ae:eb:86:a2:b0:b4:5b:f6:46:1e:19:ca:a5:62:72:16:38:
21:74:c8:c3:65:1d:a1:e3:94:e3:33:7c:9f:a5:62:97:29:cb:
b5:cf:61:93:50:51:78:28:8d:bb:1e:6b:57:e3:12:40:d6:d8:
a4:9f:38:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:00:27 2025 by rpki-client